Forskel mellem versioner af "Fortinet"
Fra NørderiWiki
Freesoft (diskussion | bidrag) (→public ip) |
Freesoft (diskussion | bidrag) (→public ip) |
||
Linje 17: | Linje 17: | ||
= public ip = | = public ip = | ||
+ | |||
+ | DNS translation | ||
+ | http://kb.fortinet.com/kb/documentLink.do?externalID=FD34099 | ||
config firewall dsntranslation | config firewall dsntranslation |
Versionen fra 24. feb 2018, 22:20
NAT / VIP - Port forward
Lav VIPs for hver port der skal åbnes/forwardes, fx:
public.y.xxx.zz --> 192.168.1.50 (TCP: 3390 --> 3389)
Hvis der er flere porte mod samme server, kan der laves en VIP group.
Herefter er det bare at lave en policy med VIP group som destination og ALL i Service.
Se https://docs.fortinet.com/uploaded/files/1652/using-port-forwarding-on-a-FortiGate-unit.pdf
public ip
DNS translation http://kb.fortinet.com/kb/documentLink.do?externalID=FD34099
config firewall dsntranslation
edit 1 set dst 217.pp.pp.pp set netmask 255.255.255.255 set src 192.168.1.100 next end
Hairpin
http://cookbook.fortinet.com/configure-hair-pinning-fortigate/
VDOM
config system global set vdom-admin enable end